Consider changing the fallback process to opt-out

If we did this, we could rebuild the list by running a script, and occasionally collect opt-outs and add them to the blacklist.

I don't think this would worry anyone too much.